> | Lab 3.4.4.2 Multi-Switch VLANs - Overview Estimated time: 60 min. Objectives: This Lab will focus on your ability to accomplish the following tasks: Console into the switch to determine the firmware version Check the IP address and subnet mask for the switch Use the Management console to check VLAN related menu options Check workstation network settings to verify compatibility with switch and router settings Create a new VLAN, name it and move member ports to it. Test VLANs functionality by moving a workstation from one VLAN to another Enable ISL (Inter-Switch Link) trunking on trunk ports for the two switches Background: In this lab you will work with Ethernet Virtual Local Area Networks or VLANs. VLANs can be used to separate groups of users based on function rather than physical location. Normally all of the ports on a switch are in the same default VLAN 1. A Network Administrator can create additional VLANs and move some ports into those VLANs to create isolated groups of users regardless of where they are physically located. This creates smaller broadcast domains which helps to reduce and localize network traffic. If a switch with 24 ports is divided into 2 VLANs of 12 ports each, the users on one VLAN will not be able to access resources (such as servers or printers) on the other VLAN. VLANs can also be created using ports from multiple switches that are "trunked" together on a backbone. In order for two VLANs to communicate they must be connected by a router. Security can be controlled with router Access Control Lists (ACLs) which will be covered in a future lab. You will console into the switch and use the Management Console User Interface menus to view the options available to manage VLANs and will check the current VLAN configuration. You will also use Telnet to access the switch and check some settings as well as move your connection from one VLAN to another to determine the affects of the "Management Domain". When managing a switch, the Management Domain is always VLAN 1. The Network Administrator's workstation must have access to a port in the VLAN 1 Management Domain. All ports are assigned to VLAN 1 by default. This lab will also help demonstrate how VLANs can be used to separate traffic and reduce broadcast domains. Tools / Preparation: Prior to starting the lab, the teacher or lab assistant should have two switches available with the default VLAN settings and each switch must be running the Enterprise Edition firmware. If your switches are not, then the Enterprise Edition firmware must be downloaded from the Cisco web site by a person with a CCO login account (your academy contact or instructor). The procedure for upgrading switch firmware was covered in the prior lab (3.4.4 Lab 1). A workstation with HyperTerminal should be available as a console and for Telnetting into the switch. Since there may be only a couple of switches available, the instructor should demonstrate this lab at a minimum and students should work in larger teams to get hands on. While one team is doing switch labs the others could be doing web-based research on switches at the Cisco web site URLs listed below. Before beginning this lab you should read the Networking Academy Second Year Companion Guide, Chapter 3 - VLANs. You should also review semester 3 On-line Lesson 3. The following is a list of equipment required. Two Windows PC workstations w/ HyperTerminal installed (configured for console connection to switch and compatible IP addresses) Two Cisco Switches (19xx or 28xx model) with Enterprise Edition software with at least one 100BASE-TX (CAT 5 copper) trunk port (A or B). Console Cable (roll-over or null cable) CAT 5 Ethernet Cable from each workstation to a switch Ethernet port CAT 5 cross-over cable to connect the switch trunk ports (100BASE-TX) Web Site Resources: LAN Switching basics General information on all Cisco products - (Scroll down to chapter 16 - Switches) 1900 / 2820 series Ethernet switches 2900 series Fast Ethernet switches 3500 series Gigabit Ethernet switches Virtual LANs for 1900/2820 Switches Notes: Step 1. Console into the LAN switch. Console into the switch by attaching the workstation serial port to the switch console port and answer the following questions. (Note: Answers will vary depending on switch model number). For this lab you have to have Enterprise Edition software to create VLANs that span multiple switches. If the switch needs to be upgraded to Enterprise edition software refer to the lab on Switch Firmware upgrade. You may need to use the [F] Firmware option from the switch main menu to determine the answers to the following. 1. What is the model number of the switch? Switch-A: Switch-B: 2. Does this switch have standard edition or Enterprise edition software? Switch-A: Switch-B: 3. What is the Firmware version of the switch? Switch-A: Switch-B: 4. What option on the switch menu is used to create or modify VLANS? Switch-A: Switch-B: Step 2. Check the IP address of the switch and the attached workstations. 5. Check the IP address and subnet mask of the switch and workstations to verify that they are compatible and on the same network. Record your settings below:
> Switch A IP: | ________________ | Subnet Mask: | ________________
> Switch B IP: | ________________ | Subnet Mask: | ________________
> Wkstn 1 IP | ________________ | Subnet Mask: | ________________
> Wkstn 2 IP: | ________________ | Subnet Mask: | ________________
Step 3. Enter VLAN configuration mode. 6. What is the maximum number of VLANS that can be created? 7. Select the [L] List VLANs option from the submenu and then enter the word ALL. What VLANS are currently listed? 8. List the options on the VLAN configuration menu and sub-menus in the following table: VLAN Menu Options from a Cisco Catalyst 1912 (10 Mbps) Ethernet Switch
Menu Opt. | VLAN Menu Option Description | Sub-menu options (list two or more)
Step 4. Using the VLAN menu options, configure the VLANs. NOTE: The following steps were performed on a Catalyst 1912 WS-C1912C-EN (12-port) switch with Enterprise Edition firmware version V8.01.02 (Switch-A) and Catalyst 1924 WS-C1924C-EN (24-port) switch with Enterprise Edition firmware version V8.01.02 (Switch-B) Your answers may vary. 9. Check the configuration of the default VLAN by selecting [M] Modify VLANs option and then select VLAN 1. What are the current member ports in VLAN 1? 10. Create two new Ethernet VLANs and name them. Give each one a name (eg: your last name plus the number of the VLAN: smith10 or smith20). What names did you give them? For the two VLANs you create use numbers 10 and 20. Assign a SAID to each VLAN using the [I] 802.10 SAID VLANs option. Use SAID 10 and 20 for VLAN 10 and 20. Assign the first half of the ports to VLAN 10 and the second half to VLAN 20. Repeat this on Switch-B using the same names, VLAN number and same SAID. Step 5. Enable "Trunking" on port B of both Switch-A and Switch-B. Under VLAN configuration select [T] Trunk Configuration and select port B. In the Trunk B Configuration Menu select [T] Trunking then select 1 to turn trunking on. Repeat for Switch-A and Switch-B. By default 1-1005 VLANs are allowed to use the trunk port. NOTE: You need to use a CAT 5 crossover cable to connect Switch-A port B to Switch-B port B. This assumes that each of your switches has at least one 100BASE-TX (CAT 5 copper) trunk or backbone port (port A or B). Some switches have one 100BASE-TX and one 100BASE-FX (fiber) trunk port and some have two 100BASE-FX ports depending on the model.